Grants / Department of Homeland Security / Department of Homeland Security - FEMA

DHS-23-GPD-137-00-01: Fiscal Year (FY) 2023 State and Local Cybersecurity Grant Program

Closed Closed October 6, 2023 Opportunity DHS-23-GPD-137-00-01 ☆ Save

This grant is closed. Who won this program's grants before is below, and similar open grants are at the end of the page. It is in our archive of Department of Homeland Security - FEMA notices from 2023.

• Award ceiling$375 million
• Award floor$500,000
• Total funding$375 million
• Expected awards56
• Cost sharingNot required
• Funding typeGrant

Key dates

Who can apply

This opportunity was open to state and local governments.

• State governments

More grants for state and local governments.

Is this a realistic fit?

• Past State and Local Cybersecurity Grant Program Tribal Cybersecurity Grant Program awards averaged $3.9 million; this notice allows up to $375 million per award.
• Most of the program's money (97% over five years) went to state and local governments.
• No cost sharing or match is required.

What the grant funds

A Cybersecurity Plan of an eligible entity shall -- --(A) incorporate, to the extent practicable -- --(i) any existing plans of the eligible entity to protect against cybersecurity risks and cybersecurity threats to information systems owned or operated by, or on behalf of, State, local, or Tribal governments; and -(ii) if the eligible entity is a State, consultation and feedback from local governments and associations of local governments within the jurisdiction of the eligible entity; --(B) describe, to the extent practicable, how the eligible entity will -- --(i) manage, monitor, and track information systems, applications, and user accounts owned or operated by, or on behalf of, the eligible entity or, if the eligible entity is a State, local governments within the jurisdiction of the eligible entity, and the information technology deployed on those information systems, including legacy information systems and information technology that are no longer supported by the manufacturer of the systems or technology; --(ii) monitor, audit, and, track network traffic and activity transiting or traveling to or from information systems, applications, and user accounts owned or operated by, or on behalf of, the eligible entity or, if the eligible entity is a State, local governments within the jurisdiction of the eligible entity; --(iii) enhance the preparation, response, and resiliency of information systems, applications, and user accounts owned or operated by, or on behalf of, the eligible entity or, if the eligible entity is a State, local governments within the jurisdiction of the eligible entity, against cybersecurity risks and cybersecurity threats; --(iv) implement a process of continuous cybersecurity vulnerability assessments and threat mitigation practices prioritized by degree of risk to address cybersecurity risks and cybersecurity threats on information systems, applications, and user accounts owned or operated by, or on behalf of, the eligible entity or, if the eligible entity is a State, local governments within the jurisdiction of the eligible entity; --(v) ensure that the eligible entity and, if the eligible entity is a State, local governments within the jurisdiction of the eligible entity, adopt and use best practices and methodologies to enhance cybersecurity, such as -- --(I) the practices set forth in the cybersecurity framework developed by the National Institute of Standards and Technology; --(II) cyber chain supply chain risk…

Category: Other.

Applying now

This notice no longer takes applications. Agencies often post the same opportunity again under a new number, so check the program's notices on Grants.gov and the similar open grants below.

The notice on Grants.gov keeps its full text and attachments, which is useful for planning a resubmission.